Owut: OpenWrt Upgrade Tool

There are PRs that fix this waiting to be merged:

You should be able to upgrade using something like:

owut upgrade --remove libbpf
2 Likes

Thank you Dante.This worked for me.

That worked nicely, thank you.

Unfortunately, the unit no longer enjoys changing the lan address:

Thanks, upgrade went fine, and on my other ipq806x (MR-52), I upgraded owut before upgrading the whole kit and kaboodle and didn’t get that complaint.

2 Likes

Reporting the recent apk-related merges have fixed the recent libustream-openssl ā€˜impossible package selection’ error I experienced recently for SNAPSHOT.

I gather ther’ll be a period for feedback, then apply them to 25.12.0-rc2?

1 Like

That's the plan.

1 Like

Hello efahl - Do you have idea why my Asus RT-AX59u is stuck on version 24.10.3? I tried multiple ways to upgrade to 24.10.4 (also 24.10.5) and even to the latest RC2 as well as snapshot but it always revert back to 24.10.3.

Tried via owut, sysupgrade, attended sysupgrade. I dont see any errors in the output during the upgrade as well as in the logs.

owut check -v
owut - OpenWrt Upgrade Tool 2026.01.13~2526d84b-r1 (/usr/bin/owut)
ASU-Server     https://sysupgrade.openwrt.org
Upstream       https://downloads.openwrt.org
Target         mediatek/filogic
Profile        asus_rt-ax59u
Package-arch   aarch64_cortex-a53
Root-FS-type   squashfs
Sys-type       sysupgrade
Version-from   24.10.3 r28872-daca7c049b (kernel 6.6.104)
Version-to     24.10.5 r29087-d9c5716d1d (kernel 6.6.119)
Build-commit   https://git.openwrt.org/?p=openwrt/openwrt.git;a=shortlog;h=d9c5716d1d
Build-FS-type  squashfs
Build-at       2025-12-17T21:08:22Z (~36 days ago)
Image-prefix   openwrt-24.10.5-mediatek-filogic-asus_rt-ax59u
Image-URL      https://downloads.openwrt.org/releases/24.10.5/targets/mediatek/filogic
Image-file     openwrt-24.10.5-mediatek-filogic-asus_rt-ax59u-squashfs-sysupgrade.bin
Installed      199 packages
Top-level       86 packages
Default         36 packages
User-installed  65 packages (top-level only)

Package version changes:
  base-files                     1662~daca7c049b                             1668~d9c5716d1d
  dropbear                       2024.86-r1                                  2024.86-r2
  irqbalance                     1.9.5-r1                                    1.9.4-r1
  kmod-crypto-acompress          6.6.104-r1                                  6.6.119-r1
  kmod-crypto-aead               6.6.104-r1                                  6.6.119-r1
  kmod-crypto-authenc            6.6.104-r1                                  6.6.119-r1
  kmod-crypto-crc32c             6.6.104-r1                                  6.6.119-r1
  kmod-crypto-des                6.6.104-r1                                  6.6.119-r1
  kmod-crypto-hash               6.6.104-r1                                  6.6.119-r1
  kmod-crypto-hmac               6.6.104-r1                                  6.6.119-r1
  kmod-crypto-hw-safexcel        6.6.104-r1                                  6.6.119-r1
  kmod-crypto-manager            6.6.104-r1                                  6.6.119-r1
  kmod-crypto-md5                6.6.104-r1                                  6.6.119-r1
  kmod-crypto-null               6.6.104-r1                                  6.6.119-r1
  kmod-crypto-sha1               6.6.104-r1                                  6.6.119-r1
  kmod-crypto-sha256             6.6.104-r1                                  6.6.119-r1
  kmod-crypto-sha512             6.6.104-r1                                  6.6.119-r1
  kmod-fs-ext4                   6.6.104-r1                                  6.6.119-r1
  kmod-gpio-button-hotplug       6.6.104-r5                                  6.6.119-r5
  kmod-hwmon-core                6.6.104-r1                                  6.6.119-r1
  kmod-ipt-conntrack             6.6.104-r1                                  6.6.119-r1
  kmod-ipt-conntrack-extra       6.6.104-r1                                  6.6.119-r1
  kmod-ipt-conntrack-label       6.6.104-r1                                  6.6.119-r1
  kmod-ipt-core                  6.6.104-r1                                  6.6.119-r1
  kmod-ipt-nat                   6.6.104-r1                                  6.6.119-r1
  kmod-leds-gpio                 6.6.104-r1                                  6.6.119-r1
  kmod-lib-crc-ccitt             6.6.104-r1                                  6.6.119-r1
  kmod-lib-crc16                 6.6.104-r1                                  6.6.119-r1
  kmod-lib-crc32c                6.6.104-r1                                  6.6.119-r1
  kmod-lib-lzo                   6.6.104-r1                                  6.6.119-r1
  kmod-libphy                    6.6.104-r1                                  6.6.119-r1
  kmod-nf-conncount              6.6.104-r1                                  6.6.119-r1
  kmod-nf-conntrack              6.6.104-r1                                  6.6.119-r1
  kmod-nf-conntrack-netlink      6.6.104-r1                                  6.6.119-r1
  kmod-nf-conntrack6             6.6.104-r1                                  6.6.119-r1
  kmod-nf-flow                   6.6.104-r1                                  6.6.119-r1
  kmod-nf-ipt                    6.6.104-r1                                  6.6.119-r1
  kmod-nf-log                    6.6.104-r1                                  6.6.119-r1
  kmod-nf-log6                   6.6.104-r1                                  6.6.119-r1
  kmod-nf-nat                    6.6.104-r1                                  6.6.119-r1
  kmod-nf-reject                 6.6.104-r1                                  6.6.119-r1
  kmod-nf-reject6                6.6.104-r1                                  6.6.119-r1
  kmod-nfnetlink                 6.6.104-r1                                  6.6.119-r1
  kmod-nft-compat                6.6.104-r1                                  6.6.119-r1
  kmod-nft-core                  6.6.104-r1                                  6.6.119-r1
  kmod-nft-fib                   6.6.104-r1                                  6.6.119-r1
  kmod-nft-nat                   6.6.104-r1                                  6.6.119-r1
  kmod-nft-offload               6.6.104-r1                                  6.6.119-r1
  kmod-nls-base                  6.6.104-r1                                  6.6.119-r1
  kmod-phy-aquantia              6.6.104-r1                                  6.6.119-r1
  kmod-scsi-core                 6.6.104-r1                                  6.6.119-r1
  kmod-tun                       6.6.104-r1                                  6.6.119-r1
  kmod-usb-core                  6.6.104-r1                                  6.6.119-r1
  kmod-usb-storage               6.6.104-r1                                  6.6.119-r1
  kmod-usb-xhci-hcd              6.6.104-r1                                  6.6.119-r1
  kmod-usb-xhci-mtk              6.6.104-r1                                  6.6.119-r1
  kmod-usb3                      6.6.104-r1                                  6.6.119-r1
1 packages were downgraded
57 packages are out-of-date

Default package analysis:
  Default                        Provided-by
  kmod-mt7915e                   not installed
  kmod-mt7986-firmware           not installed
  mt7986-wo-firmware             not installed
  nftables                       nftables-json
  odhcp6c                        not installed
  odhcpd-ipv6only                not installed
  ppp                            not installed
  ppp-mod-pppoe                  not installed
  wpad-basic-mbedtls             not installed

There are currently package build failures for 24.10.5 aarch64_cortex-a53:
  Feed: packages
    python-flask-httpauth        Tue Jan 20 23:03:54 2026 - not installed
    python-gevent                Tue Jan 20 22:53:13 2026 - not installed
    python-msgpack               Tue Jan 20 21:59:16 2026 - not installed
    radicale2                    Tue Jan 20 23:11:33 2026 - not installed
4 package build failures don't affect this device, details at
  https://downloads.openwrt.org/releases/faillogs-24.10/aarch64_cortex-a53/

WARNING: There are 8 missing default packages, confirm this is expected before proceeding
WARNING: Checks reveal package downgrades, upgrade still possible with '--force'

Only that the irqbalance package is being downgraded from 1.9.5 to 1.9.4. If that's ok, try owut upgrade --force and it should work.

(I assume you've manually removed those missing default packages? The missing mt79 stuff looks like it will kill the radios on the device, and no ppp packages means no WAN interface?)

Thanks for the tip! Regarding the missing packages: I manually removed the mt79 (WiFi) and ppp (WAN) drivers to save space/resources. I’m using the RT-AX59U as a 'Lean Main Router' only. I have other devices handling the radios and AP duties, so I don't need those on this unit.

I’ve just reinstalled all the default drivers (kmod-mt7915e, mt7986-wo-firmware, ppp, etc.) and synchronized ucode/libucode to ensure a clean owut check. Also tried the -force method and also --clean-slate still it is reverting back to 24.10.3

owut check -v after reinstalling removed default drivers and using --force

owut upgrade -V 24.10.5 --force -v
owut - OpenWrt Upgrade Tool 2026.01.13~2526d84b-r1 (/usr/bin/owut)
ASU-Server     https://sysupgrade.openwrt.org
Upstream       https://downloads.openwrt.org
Target         mediatek/filogic
Profile        asus_rt-ax59u
Package-arch   aarch64_cortex-a53
Root-FS-type   squashfs
Sys-type       sysupgrade
Version-from   24.10.3 r28872-daca7c049b (kernel 6.6.104)
Version-to     24.10.5 r29087-d9c5716d1d (kernel 6.6.119)
Build-commit   https://git.openwrt.org/?p=openwrt/openwrt.git;a=shortlog;h=d9c5716d1d
Build-FS-type  squashfs
Build-at       2025-12-17T21:08:22Z (~36 days ago)
Image-prefix   openwrt-24.10.5-mediatek-filogic-asus_rt-ax59u
Image-URL      https://downloads.openwrt.org/releases/24.10.5/targets/mediatek/filogic
Image-file     openwrt-24.10.5-mediatek-filogic-asus_rt-ax59u-squashfs-sysupgrade.bin
Installed      231 packages
Top-level       94 packages
Default         36 packages
User-installed  65 packages (top-level only)

Package version changes:
  base-files                     1662~daca7c049b                             1668~d9c5716d1d
  dropbear                       2024.86-r1                                  2024.86-r2
  irqbalance                     1.9.5-r1                                    1.9.4-r1
  kmod-cfg80211                  6.6.104.6.12.44-r2                          6.6.119.6.12.61-r1
  kmod-crypto-acompress          6.6.104-r1                                  6.6.119-r1
  kmod-crypto-aead               6.6.104-r1                                  6.6.119-r1
  kmod-crypto-authenc            6.6.104-r1                                  6.6.119-r1
  kmod-crypto-ccm                6.6.104-r1                                  6.6.119-r1
  kmod-crypto-cmac               6.6.104-r1                                  6.6.119-r1
  kmod-crypto-crc32c             6.6.104-r1                                  6.6.119-r1
  kmod-crypto-ctr                6.6.104-r1                                  6.6.119-r1
  kmod-crypto-des                6.6.104-r1                                  6.6.119-r1
  kmod-crypto-gcm                6.6.104-r1                                  6.6.119-r1
  kmod-crypto-geniv              6.6.104-r1                                  6.6.119-r1
  kmod-crypto-gf128              6.6.104-r1                                  6.6.119-r1
  kmod-crypto-ghash              6.6.104-r1                                  6.6.119-r1
  kmod-crypto-hash               6.6.104-r1                                  6.6.119-r1
  kmod-crypto-hmac               6.6.104-r1                                  6.6.119-r1
  kmod-crypto-hw-safexcel        6.6.104-r1                                  6.6.119-r1
  kmod-crypto-manager            6.6.104-r1                                  6.6.119-r1
  kmod-crypto-md5                6.6.104-r1                                  6.6.119-r1
  kmod-crypto-null               6.6.104-r1                                  6.6.119-r1
  kmod-crypto-rng                6.6.104-r1                                  6.6.119-r1
  kmod-crypto-seqiv              6.6.104-r1                                  6.6.119-r1
  kmod-crypto-sha1               6.6.104-r1                                  6.6.119-r1
  kmod-crypto-sha256             6.6.104-r1                                  6.6.119-r1
  kmod-crypto-sha3               6.6.104-r1                                  6.6.119-r1
  kmod-crypto-sha512             6.6.104-r1                                  6.6.119-r1
  kmod-fs-ext4                   6.6.104-r1                                  6.6.119-r1
  kmod-gpio-button-hotplug       6.6.104-r5                                  6.6.119-r5
  kmod-hwmon-core                6.6.104-r1                                  6.6.119-r1
  kmod-ipt-conntrack             6.6.104-r1                                  6.6.119-r1
  kmod-ipt-conntrack-extra       6.6.104-r1                                  6.6.119-r1
  kmod-ipt-conntrack-label       6.6.104-r1                                  6.6.119-r1
  kmod-ipt-core                  6.6.104-r1                                  6.6.119-r1
  kmod-ipt-nat                   6.6.104-r1                                  6.6.119-r1
  kmod-leds-gpio                 6.6.104-r1                                  6.6.119-r1
  kmod-lib-crc-ccitt             6.6.104-r1                                  6.6.119-r1
  kmod-lib-crc16                 6.6.104-r1                                  6.6.119-r1
  kmod-lib-crc32c                6.6.104-r1                                  6.6.119-r1
  kmod-lib-lzo                   6.6.104-r1                                  6.6.119-r1
  kmod-libphy                    6.6.104-r1                                  6.6.119-r1
  kmod-mac80211                  6.6.104.6.12.44-r2                          6.6.119.6.12.61-r1
  kmod-mt76-connac               6.6.104.2025.09.15~6467af3b-r1              6.6.119.2025.11.06~eb567bc7-r1
  kmod-mt76-core                 6.6.104.2025.09.15~6467af3b-r1              6.6.119.2025.11.06~eb567bc7-r1
  kmod-mt7915e                   6.6.104.2025.09.15~6467af3b-r1              6.6.119.2025.11.06~eb567bc7-r1
  kmod-mt7986-firmware           6.6.104.2025.09.15~6467af3b-r1              6.6.119.2025.11.06~eb567bc7-r1
  kmod-nf-conncount              6.6.104-r1                                  6.6.119-r1
  kmod-nf-conntrack              6.6.104-r1                                  6.6.119-r1
  kmod-nf-conntrack-netlink      6.6.104-r1                                  6.6.119-r1
  kmod-nf-conntrack6             6.6.104-r1                                  6.6.119-r1
  kmod-nf-flow                   6.6.104-r1                                  6.6.119-r1
  kmod-nf-ipt                    6.6.104-r1                                  6.6.119-r1
  kmod-nf-log                    6.6.104-r1                                  6.6.119-r1
  kmod-nf-log6                   6.6.104-r1                                  6.6.119-r1
  kmod-nf-nat                    6.6.104-r1                                  6.6.119-r1
  kmod-nf-reject                 6.6.104-r1                                  6.6.119-r1
  kmod-nf-reject6                6.6.104-r1                                  6.6.119-r1
  kmod-nfnetlink                 6.6.104-r1                                  6.6.119-r1
  kmod-nft-compat                6.6.104-r1                                  6.6.119-r1
  kmod-nft-core                  6.6.104-r1                                  6.6.119-r1
  kmod-nft-fib                   6.6.104-r1                                  6.6.119-r1
  kmod-nft-nat                   6.6.104-r1                                  6.6.119-r1
  kmod-nft-offload               6.6.104-r1                                  6.6.119-r1
  kmod-nls-base                  6.6.104-r1                                  6.6.119-r1
  kmod-phy-aquantia              6.6.104-r1                                  6.6.119-r1
  kmod-ppp                       6.6.104-r1                                  6.6.119-r1
  kmod-pppoe                     6.6.104-r1                                  6.6.119-r1
  kmod-pppox                     6.6.104-r1                                  6.6.119-r1
  kmod-scsi-core                 6.6.104-r1                                  6.6.119-r1
  kmod-slhc                      6.6.104-r1                                  6.6.119-r1
  kmod-thermal                   6.6.104-r1                                  6.6.119-r1
  kmod-tun                       6.6.104-r1                                  6.6.119-r1
  kmod-usb-core                  6.6.104-r1                                  6.6.119-r1
  kmod-usb-storage               6.6.104-r1                                  6.6.119-r1
  kmod-usb-xhci-hcd              6.6.104-r1                                  6.6.119-r1
  kmod-usb-xhci-mtk              6.6.104-r1                                  6.6.119-r1
  kmod-usb3                      6.6.104-r1                                  6.6.119-r1
  luci                           26.018.63408~11ffeb0                        26.021.66732~4b823e3
  luci-app-attendedsysupgrade    26.018.63408~11ffeb0                        26.021.66732~4b823e3
  luci-app-firewall              26.018.63408~11ffeb0                        26.021.66732~4b823e3
  luci-app-irqbalance            26.018.63408~11ffeb0                        26.021.66732~4b823e3
  luci-app-nlbwmon               26.018.63408~11ffeb0                        26.021.66732~4b823e3
  luci-app-package-manager       26.018.63408~11ffeb0                        26.021.66732~4b823e3
  luci-app-statistics            26.018.63408~11ffeb0                        26.021.66732~4b823e3
  luci-app-wol                   26.018.63408~11ffeb0                        26.021.66732~4b823e3
  luci-base                      26.018.63408~11ffeb0                        26.021.66732~4b823e3
  luci-compat                    26.018.63408~11ffeb0                        26.021.66732~4b823e3
  luci-lib-base                  26.018.63408~11ffeb0                        26.021.66732~4b823e3
  luci-lib-chartjs               26.018.63408~11ffeb0                        26.021.66732~4b823e3
  luci-lib-ip                    26.018.63408~11ffeb0                        26.021.66732~4b823e3
  luci-lib-ipkg                  26.018.63408~11ffeb0                        26.021.66732~4b823e3
  luci-lib-jsonc                 26.018.63408~11ffeb0                        26.021.66732~4b823e3
  luci-lib-nixio                 26.018.63408~11ffeb0                        26.021.66732~4b823e3
  luci-light                     26.018.63408~11ffeb0                        26.021.66732~4b823e3
  luci-lua-runtime               26.018.63408~11ffeb0                        26.021.66732~4b823e3
  luci-mod-admin-full            26.018.63408~11ffeb0                        26.021.66732~4b823e3
  luci-mod-network               26.018.63408~11ffeb0                        26.021.66732~4b823e3
  luci-mod-status                26.018.63408~11ffeb0                        26.021.66732~4b823e3
  luci-mod-system                26.018.63408~11ffeb0                        26.021.66732~4b823e3
  luci-proto-ipv6                26.018.63408~11ffeb0                        26.021.66732~4b823e3
  luci-proto-ppp                 26.018.63408~11ffeb0                        26.021.66732~4b823e3
  luci-ssl                       26.018.63408~11ffeb0                        26.021.66732~4b823e3
  luci-theme-bootstrap           26.018.63408~11ffeb0                        26.021.66732~4b823e3
1 packages were downgraded
104 packages are out-of-date

Default package analysis:
  Default                        Provided-by
  nftables                       nftables-json

There are currently package build failures for 24.10.5 aarch64_cortex-a53:
  Feed: packages
    python-flask-httpauth        Thu Jan 22 20:47:23 2026 - not installed
    python-gevent                Thu Jan 22 20:28:51 2026 - not installed
    python-msgpack               Thu Jan 22 19:28:53 2026 - not installed
    radicale2                    Thu Jan 22 20:49:17 2026 - not installed
4 package build failures don't affect this device, details at
  https://downloads.openwrt.org/releases/faillogs-24.10/aarch64_cortex-a53/

Request:
  Version 24.10.5 r29087-d9c5716d1d (kernel 6.6.119)
Request hash:
  d0828f5a1456ea7d54146503a9ae9421c33bc62d5f5f26067468f7cff7020370
--
Status:   queued - 0 ahead of you
Progress:   0s total =   0s in queue +   0s in build
--
Status:   container_setup
Progress:   4s total =   0s in queue +   4s in build
--
Status:   validate_manifest
Progress:  20s total =   0s in queue +  20s in build
--
Status:   building_image
Progress:  40s total =   0s in queue +  40s in build
--
Status:   done
Progress:  44s total =   0s in queue +  44s in build

Build succeeded in  44s total =   0s in queue +  44s to build:
  version_number = 24.10.5
  version_code   = r29087-d9c5716d1d (requested r29087-d9c5716d1d)
  kernel_version = 6.6.119
  rootfs_size_mb = default
  init-script    = no-init-script

Image source: https://sysupgrade.openwrt.org/store/d0828f5a1456ea7d54146503a9ae9421c33bc62d5f5f26067468f7cff7020370/openwrt-24.10.5-d4e535772f78-mediatek-filogic-asus_rt-ax59u-squashfs-sysupgrade.bin
Image saved : /tmp/firmware.bin
Manifest    : /tmp/firmware-manifest.json
Verifying   : /tmp/firmware.bin (19641118 bytes) against /tmp/firmware.sha256sums
  Saved sha256 matches
  verifying sysupgrade tar file integrity
Checks complete, image is valid.
Installing /tmp/firmware.bin and rebooting...
root@XXXXXXX:~# Connection to 192.168.2.1 closed by remote host.
Connection to 192.168.2.1 closed.

Result after the upgrade, stays at the old 24.10.3:

BusyBox v1.36.1 (2025-09-24 11:31:49 UTC) built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt 24.10.3, r28872-daca7c049b
 -----------------------------------------------------

Ahhh! A filogic device, I should have noticed that right away...

I'm going to bet real money you need to install the fitblk package. If it's not there (due to a packaging bug), then sysupgrade just silently quits just as you're seeing. Try this and see if that helps:

opkg update && opkg install fitblk

And regarding ripping out defaults to streamline stuff, I do exactly that, too. On my AP, I have removed dnsmasq, odhcpd* and firewall4 since they're not needed. After you remove them, you can tell owut to stop complaining by adding them to the config as list entries of ignored_defaults like this:

$ cat /etc/config/attendedsysupgrade
...
config owut 'owut'
        option verbosity '1'
        option pre_install '/etc/owut.d/pre-install.sh'
        list ignored_defaults 'dnsmasq'
        list ignored_defaults 'odhcpd-ipv6only'
        list ignored_defaults 'firewall4'
        list ignored_defaults 'wpad-basic-mbedtls'
1 Like

Thanks again for your reply! This is the result of me running the "opkg update && opkg install fitblk" command and doing the upgrade again using force.

opkg update && opkg install fitblk
Downloading https://downloads.openwrt.org/releases/24.10.3/targets/mediatek/filogic/packages/Packages.gz
Updated list of available packages in /usr/lib/opkg/lists/openwrt_core
Downloading https://downloads.openwrt.org/releases/24.10.3/targets/mediatek/filogic/packages/Packages.sig
root@Nexus-RT-AX:~# uci del_list attendedsysupgrade.owut.ignored_defaults='kmod-mt7915e' 2>/dev/null
root@Nexus-RT-AX:~# uci add_list attendedsysupgrade.owut.ignored_defaults='kmod-mt7915e'
efaults='mt7986-root@Nexus-RT-AX:~# uci add_list attendedsysupgrade.owut.ignored_defaults='kmod-mt7986-firmware'
root@Nexus-RT-AX:~# uci add_list attendedsysupgrade.owut.ignored_defaults='mt7986-wo-firmware'
root@Nexus-RT-AX:~# opkg update && opkg install fitblk
Downloading https://downloads.openwrt.org/releases/24.10.3/targets/mediatek/filogic/packages/Packages.gz
Updated list of available packages in /usr/lib/opkg/lists/openwrt_core
Downloading https://downloads.openwrt.org/releases/24.10.3/targets/mediatek/filogic/packages/Packages.sig
Signature check passed.
Downloading https://downloads.openwrt.org/releases/24.10.3/packages/aarch64_cortex-a53/base/Packages.gz
Updated list of available packages in /usr/lib/opkg/lists/openwrt_base
Downloading https://downloads.openwrt.org/releases/24.10.3/packages/aarch64_cortex-a53/base/Packages.sig
Signature check passed.
Downloading https://downloads.openwrt.org/releases/24.10.3/targets/mediatek/filogic/kmods/6.6.104-1-6a9e125268c43e0bae8cecb014c8ab03/Packages.gz
Updated list of available packages in /usr/lib/opkg/lists/openwrt_kmods
Downloading https://downloads.openwrt.org/releases/24.10.3/targets/mediatek/filogic/kmods/6.6.104-1-6a9e125268c43e0bae8cecb014c8ab03/Packages.sig
Signature check passed.
Downloading https://downloads.openwrt.org/releases/24.10.3/packages/aarch64_cortex-a53/luci/Packages.gz
Updated list of available packages in /usr/lib/opkg/lists/openwrt_luci
Downloading https://downloads.openwrt.org/releases/24.10.3/packages/aarch64_cortex-a53/luci/Packages.sig
Signature check passed.
Downloading https://downloads.openwrt.org/releases/24.10.3/packages/aarch64_cortex-a53/packages/Packages.gz
Updated list of available packages in /usr/lib/opkg/lists/openwrt_packages
Downloading https://downloads.openwrt.org/releases/24.10.3/packages/aarch64_cortex-a53/packages/Packages.sig
Signature check passed.
Downloading https://downloads.openwrt.org/releases/24.10.3/packages/aarch64_cortex-a53/routing/Packages.gz
Updated list of available packages in /usr/lib/opkg/lists/openwrt_routing
Downloading https://downloads.openwrt.org/releases/24.10.3/packages/aarch64_cortex-a53/routing/Packages.sig
Signature check passed.
Downloading https://downloads.openwrt.org/releases/24.10.3/packages/aarch64_cortex-a53/telephony/Packages.gz
Updated list of available packages in /usr/lib/opkg/lists/openwrt_telephony
Downloading https://downloads.openwrt.org/releases/24.10.3/packages/aarch64_cortex-a53/telephony/Packages.sig
Signature check passed.
Package fitblk (2) installed in root is up to date.

After installation of fitblk

root@Nexus-RT-AX:~# owut upgrade -V 24.10.5 --force -v
owut - OpenWrt Upgrade Tool 2026.01.13~2526d84b-r1 (/usr/bin/owut)
ASU-Server     https://sysupgrade.openwrt.org
Upstream       https://downloads.openwrt.org
Target         mediatek/filogic
Profile        asus_rt-ax59u
Package-arch   aarch64_cortex-a53
Root-FS-type   squashfs
Sys-type       sysupgrade
Version-from   24.10.3 r28872-daca7c049b (kernel 6.6.104)
Version-to     24.10.5 r29087-d9c5716d1d (kernel 6.6.119)
Build-commit   https://git.openwrt.org/?p=openwrt/openwrt.git;a=shortlog;h=d9c5716d1d
Build-FS-type  squashfs
Build-at       2025-12-17T21:08:22Z (~36 days ago)
Image-prefix   openwrt-24.10.5-mediatek-filogic-asus_rt-ax59u
Image-URL      https://downloads.openwrt.org/releases/24.10.5/targets/mediatek/filogic
Image-file     openwrt-24.10.5-mediatek-filogic-asus_rt-ax59u-squashfs-sysupgrade.bin
Installed      223 packages
Top-level       86 packages
Default         36 packages
User-installed  65 packages (top-level only)

Package version changes:
  base-files                     1662~daca7c049b                             1668~d9c5716d1d
  dropbear                       2024.86-r1                                  2024.86-r2
  irqbalance                     1.9.5-r1                                    1.9.4-r1
  kmod-cfg80211                  6.6.104.6.12.44-r2                          6.6.119.6.12.61-r1
  kmod-crypto-acompress          6.6.104-r1                                  6.6.119-r1
  kmod-crypto-aead               6.6.104-r1                                  6.6.119-r1
  kmod-crypto-authenc            6.6.104-r1                                  6.6.119-r1
  kmod-crypto-ccm                6.6.104-r1                                  6.6.119-r1
  kmod-crypto-cmac               6.6.104-r1                                  6.6.119-r1
  kmod-crypto-crc32c             6.6.104-r1                                  6.6.119-r1
  kmod-crypto-ctr                6.6.104-r1                                  6.6.119-r1
  kmod-crypto-des                6.6.104-r1                                  6.6.119-r1
  kmod-crypto-gcm                6.6.104-r1                                  6.6.119-r1
  kmod-crypto-geniv              6.6.104-r1                                  6.6.119-r1
  kmod-crypto-gf128              6.6.104-r1                                  6.6.119-r1
  kmod-crypto-ghash              6.6.104-r1                                  6.6.119-r1
  kmod-crypto-hash               6.6.104-r1                                  6.6.119-r1
  kmod-crypto-hmac               6.6.104-r1                                  6.6.119-r1
  kmod-crypto-hw-safexcel        6.6.104-r1                                  6.6.119-r1
  kmod-crypto-manager            6.6.104-r1                                  6.6.119-r1
  kmod-crypto-md5                6.6.104-r1                                  6.6.119-r1
  kmod-crypto-null               6.6.104-r1                                  6.6.119-r1
  kmod-crypto-rng                6.6.104-r1                                  6.6.119-r1
  kmod-crypto-seqiv              6.6.104-r1                                  6.6.119-r1
  kmod-crypto-sha1               6.6.104-r1                                  6.6.119-r1
  kmod-crypto-sha256             6.6.104-r1                                  6.6.119-r1
  kmod-crypto-sha3               6.6.104-r1                                  6.6.119-r1
  kmod-crypto-sha512             6.6.104-r1                                  6.6.119-r1
  kmod-fs-ext4                   6.6.104-r1                                  6.6.119-r1
  kmod-gpio-button-hotplug       6.6.104-r5                                  6.6.119-r5
  kmod-hwmon-core                6.6.104-r1                                  6.6.119-r1
  kmod-ipt-conntrack             6.6.104-r1                                  6.6.119-r1
  kmod-ipt-conntrack-extra       6.6.104-r1                                  6.6.119-r1
  kmod-ipt-conntrack-label       6.6.104-r1                                  6.6.119-r1
  kmod-ipt-core                  6.6.104-r1                                  6.6.119-r1
  kmod-ipt-nat                   6.6.104-r1                                  6.6.119-r1
  kmod-leds-gpio                 6.6.104-r1                                  6.6.119-r1
  kmod-lib-crc-ccitt             6.6.104-r1                                  6.6.119-r1
  kmod-lib-crc16                 6.6.104-r1                                  6.6.119-r1
  kmod-lib-crc32c                6.6.104-r1                                  6.6.119-r1
  kmod-lib-lzo                   6.6.104-r1                                  6.6.119-r1
  kmod-libphy                    6.6.104-r1                                  6.6.119-r1
  kmod-mac80211                  6.6.104.6.12.44-r2                          6.6.119.6.12.61-r1
  kmod-mt76-connac               6.6.104.2025.09.15~6467af3b-r1              6.6.119.2025.11.06~eb567bc7-r1
  kmod-mt76-core                 6.6.104.2025.09.15~6467af3b-r1              6.6.119.2025.11.06~eb567bc7-r1
  kmod-nf-conncount              6.6.104-r1                                  6.6.119-r1
  kmod-nf-conntrack              6.6.104-r1                                  6.6.119-r1
  kmod-nf-conntrack-netlink      6.6.104-r1                                  6.6.119-r1
  kmod-nf-conntrack6             6.6.104-r1                                  6.6.119-r1
  kmod-nf-flow                   6.6.104-r1                                  6.6.119-r1
  kmod-nf-ipt                    6.6.104-r1                                  6.6.119-r1
  kmod-nf-log                    6.6.104-r1                                  6.6.119-r1
  kmod-nf-log6                   6.6.104-r1                                  6.6.119-r1
  kmod-nf-nat                    6.6.104-r1                                  6.6.119-r1
  kmod-nf-reject                 6.6.104-r1                                  6.6.119-r1
  kmod-nf-reject6                6.6.104-r1                                  6.6.119-r1
  kmod-nfnetlink                 6.6.104-r1                                  6.6.119-r1
  kmod-nft-compat                6.6.104-r1                                  6.6.119-r1
  kmod-nft-core                  6.6.104-r1                                  6.6.119-r1
  kmod-nft-fib                   6.6.104-r1                                  6.6.119-r1
  kmod-nft-nat                   6.6.104-r1                                  6.6.119-r1
  kmod-nft-offload               6.6.104-r1                                  6.6.119-r1
  kmod-nls-base                  6.6.104-r1                                  6.6.119-r1
  kmod-phy-aquantia              6.6.104-r1                                  6.6.119-r1
  kmod-ppp                       6.6.104-r1                                  6.6.119-r1
  kmod-pppoe                     6.6.104-r1                                  6.6.119-r1
  kmod-pppox                     6.6.104-r1                                  6.6.119-r1
  kmod-scsi-core                 6.6.104-r1                                  6.6.119-r1
  kmod-slhc                      6.6.104-r1                                  6.6.119-r1
  kmod-thermal                   6.6.104-r1                                  6.6.119-r1
  kmod-tun                       6.6.104-r1                                  6.6.119-r1
  kmod-usb-core                  6.6.104-r1                                  6.6.119-r1
  kmod-usb-storage               6.6.104-r1                                  6.6.119-r1
  kmod-usb-xhci-hcd              6.6.104-r1                                  6.6.119-r1
  kmod-usb-xhci-mtk              6.6.104-r1                                  6.6.119-r1
  kmod-usb3                      6.6.104-r1                                  6.6.119-r1
  luci                           26.018.63408~11ffeb0                        26.021.66732~4b823e3
  luci-app-attendedsysupgrade    26.018.63408~11ffeb0                        26.021.66732~4b823e3
  luci-app-firewall              26.018.63408~11ffeb0                        26.021.66732~4b823e3
  luci-app-irqbalance            26.018.63408~11ffeb0                        26.021.66732~4b823e3
  luci-app-nlbwmon               26.018.63408~11ffeb0                        26.021.66732~4b823e3
  luci-app-package-manager       26.018.63408~11ffeb0                        26.021.66732~4b823e3
  luci-app-statistics            26.018.63408~11ffeb0                        26.021.66732~4b823e3
  luci-app-wol                   26.018.63408~11ffeb0                        26.021.66732~4b823e3
  luci-base                      26.018.63408~11ffeb0                        26.021.66732~4b823e3
  luci-compat                    26.018.63408~11ffeb0                        26.021.66732~4b823e3
  luci-lib-base                  26.018.63408~11ffeb0                        26.021.66732~4b823e3
  luci-lib-chartjs               26.018.63408~11ffeb0                        26.021.66732~4b823e3
  luci-lib-ip                    26.018.63408~11ffeb0                        26.021.66732~4b823e3
  luci-lib-ipkg                  26.018.63408~11ffeb0                        26.021.66732~4b823e3
  luci-lib-jsonc                 26.018.63408~11ffeb0                        26.021.66732~4b823e3
  luci-lib-nixio                 26.018.63408~11ffeb0                        26.021.66732~4b823e3
  luci-light                     26.018.63408~11ffeb0                        26.021.66732~4b823e3
  luci-lua-runtime               26.018.63408~11ffeb0                        26.021.66732~4b823e3
  luci-mod-admin-full            26.018.63408~11ffeb0                        26.021.66732~4b823e3
  luci-mod-network               26.018.63408~11ffeb0                        26.021.66732~4b823e3
  luci-mod-status                26.018.63408~11ffeb0                        26.021.66732~4b823e3
  luci-mod-system                26.018.63408~11ffeb0                        26.021.66732~4b823e3
  luci-proto-ipv6                26.018.63408~11ffeb0                        26.021.66732~4b823e3
  luci-proto-ppp                 26.018.63408~11ffeb0                        26.021.66732~4b823e3
  luci-ssl                       26.018.63408~11ffeb0                        26.021.66732~4b823e3
  luci-theme-bootstrap           26.018.63408~11ffeb0                        26.021.66732~4b823e3
1 packages were downgraded
102 packages are out-of-date

Default package analysis:
  Default                        Provided-by
  kmod-mt7915e                   user ignored
  kmod-mt7986-firmware           user ignored
  mt7986-wo-firmware             user ignored
  nftables                       nftables-json
  odhcp6c                        user ignored
  odhcpd-ipv6only                user ignored
  ppp                            user ignored
  ppp-mod-pppoe                  user ignored
  wpad-basic-mbedtls             user ignored

There are currently package build failures for 24.10.5 aarch64_cortex-a53:
  Feed: packages
    python-flask-httpauth        Thu Jan 22 20:47:23 2026 - not installed
    python-gevent                Thu Jan 22 20:28:51 2026 - not installed
    python-msgpack               Thu Jan 22 19:28:53 2026 - not installed
    radicale2                    Thu Jan 22 20:49:17 2026 - not installed
4 package build failures don't affect this device, details at
  https://downloads.openwrt.org/releases/faillogs-24.10/aarch64_cortex-a53/

Request:
  Version 24.10.5 r29087-d9c5716d1d (kernel 6.6.119)
Request hash:
  c032c756ad2666709098a9cd3ae8eb52fe57b4b5089c0b2e6f69f24266440c2a
--
Status:   done
Progress:   0s total =   0s in queue +   0s in build

Build succeeded in   0s total =   0s in queue +   0s to build:
  version_number = 24.10.5
  version_code   = r29087-d9c5716d1d (requested r29087-d9c5716d1d)
  kernel_version = 6.6.119
  rootfs_size_mb = default
  init-script    = no-init-script

Image source: https://sysupgrade.openwrt.org/store/c032c756ad2666709098a9cd3ae8eb52fe57b4b5089c0b2e6f69f24266440c2a/openwrt-24.10.5-f5d50ec9bdb5-mediatek-filogic-asus_rt-ax59u-squashfs-sysupgrade.bin
Image saved : /tmp/firmware.bin
Manifest    : /tmp/firmware-manifest.json
Verifying   : /tmp/firmware.bin (17265438 bytes) against /tmp/firmware.sha256sums
  Saved sha256 matches
  verifying sysupgrade tar file integrity
Checks complete, image is valid.
Installing /tmp/firmware.bin and rebooting...
root@XXXXXXXXXX:~# Connection to 192.168.2.1 closed by remote host.
Connection to 192.168.2.1 closed.

Still stays at 24.10.3

BusyBox v1.36.1 (2025-09-24 11:31:49 UTC) built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt 24.10.3, r28872-daca7c049b
 -----------------------------------------------------

Dang, I lost that bet, so it's time to get our hands dirty. This is something inside sysupgrade itself, so we can create the image once, stash it and then use it for experiments repeatedly.

So, run owut to create the image and stop, then copy it off device for safe keeping, so we don't have to create it again.

owut download --force ...
scp /tmp/firmware.bin other-host:/some/where/safe

Now run sysupgrade with all the debugging turned on. It should produce thousands of lines of output, but the last 30-50 lines is probably what we care about (I'm hoping our bug occurs while the console is still active, as sysupgrade does things after the network shutdown, drives are unmounted and console is disconnected during the reboot initialization).

sh -x /sbin/sysupgrade /tmp/firmware.bin

If you need to repeat above, just copy firmware.bin to the device in /tmp/ and do the sysupgrade again (I'm assuming it gets to the reboot phase, which wipes the contents of /tmp, including that binary).

Hello Efahl - I ran the debug with sh -x as you suggested. Im not familiar with these logs, but I managed to copy the very last lines of the screen before the connection dropped and the router rebooted. I did have fitblk installed for this run.

+ U_J_T1=J_V
+ export -- 'K_J_T1='
+ unset S_J_T1
+ _json_set_var JSON_CUR J_T1
+ local '___val=J_T1'
+ eval 'JSON_CUR="$___val"'
+ JSON_CUR=J_T1
+ _jshn_append JSON_UNSET J_T1
+ local '_a_value=J_T1'
+ eval 'JSON_UNSET="${JSON_UNSET} $_a_value"'
+ JSON_UNSET=' J_V_prefix J_V_path J_V_command J_T1'
+ _json_add_generic object options J_T1 J_V
+ local var
+ '[' J_V '=' J_A ]
+ var=options
+ '[[' options '==' options ]]
+ export -- 'J_V_options=J_T1' 'T_J_V_options=object'
+ _jshn_append JSON_UNSET J_V_options
+ local '_a_value=J_V_options'
+ eval 'JSON_UNSET="${JSON_UNSET} $_a_value"'
+ JSON_UNSET=' J_V_prefix J_V_path J_V_command J_T1 J_V_options'
+ _jshn_append K_J_V options
+ local '_a_value=options'
+ eval 'K_J_V="${K_J_V} $_a_value"'
+ K_J_V=' prefix path command options'
+ json_add_int save_partitions 1
+ local cur
+ _json_get_var cur JSON_CUR
+ eval 'cur="$JSON_CUR"'
+ cur=J_T1
+ _json_add_generic int save_partitions 1 J_T1
+ local var
+ '[' J_T '=' J_A ]
+ var=save_partitions
+ '[[' save_partitions '==' save_partitions ]]
+ export -- 'J_T1_save_partitions=1' 'T_J_T1_save_partitions=int'
+ _jshn_append JSON_UNSET J_T1_save_partitions
+ local '_a_value=J_T1_save_partitions'
+ eval 'JSON_UNSET="${JSON_UNSET} $_a_value"'
+ JSON_UNSET=' J_V_prefix J_V_path J_V_command J_T1 J_V_options J_T1_save_partitions'
+ _jshn_append K_J_T1 save_partitions
+ local '_a_value=save_partitions'
+ eval 'K_J_T1="${K_J_T1} $_a_value"'
+ K_J_T1=' save_partitions'
+ json_close_object
+ _json_close_table
+ local _s_cur
+ _json_get_var _s_cur JSON_CUR
+ eval '_s_cur="$JSON_CUR"'
+ _s_cur=J_T1
+ _json_get_var JSON_CUR U_J_T1
+ eval 'JSON_CUR="$U_J_T1"'
+ JSON_CUR=J_V
+ json_dump
+ jshn -w
+ ubus call system sysupgrade '{ "prefix": "\/tmp\/root", "path": "\/tmp\/sysupgrade.img", "command": "\/lib\/upgrade\/do_stage2", "options": { "save_partitions": 1 } }'
Command failed: Connection failed
root@XXXXXXXXX:/mnt/usb# Connection to 192.168.2.1 closed by remote host.
Connection to 192.168.2.1 closed.

Is this the culprit?

+ ubus call system sysupgrade '{ "prefix": "\/tmp\/root", "path": "\/tmp\/sysupgrade.img", "command": "\/lib\/upgrade\/do_stage2", "options": { "save_partitions": 1 } }'
Command failed: Connection failed

To add, this is my free memeory before upgrade:

             total       used       free     shared  buff/cache   available
Mem:        496516       59064     320760       1212      116692      387328

This is getting more mysterious rather than less.

Hmm, I don't think so, I think the "connection failed" is a normal consequence of the service shutdown at https://github.com/openwrt/procd/blob/master/system.c#L825, which happens just before /lib/upgrade/do_stage2 is run (that's where I'm thinking it's going wrong).

You might be onto something with the free space checks though. Memory looks good, how much "disk" space is there? And how big is your config backup? Run these two commands and we'll see the answers to those:

df -h
sysupgrade -b - | wc -c

Here's the result for the 2 commands:

root@Nexus-RT-AX:~# df -h
Filesystem                Size      Used Available Use% Mounted on
/dev/root                19.8M     19.8M         0 100% /rom
tmpfs                   242.4M      1.2M    241.2M   1% /tmp
/dev/ubi0_6              82.2M      6.6M     71.4M   8% /rom/overlay
overlayfs:/overlay       82.2M      6.6M     71.4M   8% /
tmpfs                   512.0K         0    512.0K   0% /dev
overlayfs:/overlay       28.3G      1.6G     25.2G   6% /tmp/opkg-lists
overlayfs:/overlay       28.3G      1.6G     25.2G   6% /tmp/opkg-lists
overlayfs:/overlay       28.3G      1.6G     25.2G   6% /tmp/opkg-lists
overlayfs:/overlay       28.3G      1.6G     25.2G   6% /tmp/opkg-lists
overlayfs:/overlay       28.3G      1.6G     25.2G   6% /tmp/opkg-lists
overlayfs:/overlay       28.3G      1.6G     25.2G   6% /tmp/opkg-lists
overlayfs:/overlay       28.3G      1.6G     25.2G   6% /tmp/opkg-lists
/dev/sda1                28.3G      1.6G     25.2G   6% /mnt/usb
/dev/sda1                28.3G      1.6G     25.2G   6% /tmp/opkg-lists
/dev/sda1                28.3G      1.6G     25.2G   6% /tmp/opkg-lists
/dev/sda1                28.3G      1.6G     25.2G   6% /tmp/opkg-lists
/dev/sda1                28.3G      1.6G     25.2G   6% /tmp/opkg-lists
/dev/sda1                28.3G      1.6G     25.2G   6% /tmp/opkg-lists
/dev/sda1                28.3G      1.6G     25.2G   6% /tmp/opkg-lists
root@Nexus-RT-AX:~# sysupgrade -b - | wc -c
32138

Well, the backup is not too big, so that's not the issue.

What the heck is up with all the duplicated mounts of /tmp/opkg-lists though? I've never seen anything like that before.

Are you using some sort of extroot setup on a USB drive or something? That might be the culprit here, if there's a script creating mounts in weird places, sysupgrade might be writing the firmware to the wrong drive or partition.

1 Like

Hello Efahl,

You were spot on with the mount suspicion. It turns out that was exactly what was choking the sysupgrade process.

I dug into it and found the culprit: a custom hotplug script I had at /etc/hotplug.d/block/99-opkg-lists. Its job was to bind-mount the opkg-lists directory to the USB to save internal flash space, but it lacked a proper check to see if the mount already existed. Every time the USB was detected or triggered, it was layering another bind-mount on top of the last one, leading to that massive list of duplicates you saw.

What i did to fix it was:

  1. Disabled the script (mv /etc/hotplug.d/block/99-opkg-lists /etc/hotplug.d/block/99-opkg-lists.DISABLED).
  2. Ran a loop to umount all the duplicates.
  3. Rebooted the router to reach a clean state.

After that, the standard attended sysupgrade worked flawlessly, and I’m now successfully running 24.10.5. Thanks for pointing out that red flag, it saved me from having to do a risky manual UBI overwrite that i was contemplating for over a week now.

1 Like

Ah, excellent, glad you got it sorted. It's good to know it wasn't a bug in the bowels of sysupgrade (wading through the stuff in those bowels is never pleasant).

2 Likes

Is there a way to avoid typing the full path, /rom/etc/uci-defaults/99-asu-defaults, when you want to keep it unchanged?

Of course! :grin:

Put it in the config file (https://openwrt.org/docs/guide-user/installation/sysupgrade.owut#persistent_uci-defaults):

uci set attendedsysupgrade.owut.init_script=/rom/etc/uci-defaults/99-asu-defaults
uci commit
1 Like